Meta Tech Provider (Access Verification retired)Meta Tech Provider Verification: Why Business Verification Alone Isn't Enough
Update (Oct 2026): Meta announced on 9 October 2026 that it is retiring Access Verification for Tech Provider apps. Business Verification and App Review are still required. Read what changed.
You passed App Review. You completed Business Verification. Your integration works perfectly for your own team. Then a client tries to connect their Facebook Page, Instagram account or ad account through your app — and it silently fails. The reason usually isn't another permission or another review. Until October 2026 this was a separate gate called Access Verification. Meta has since retired it from Tech Provider onboarding. Business Verification and App Review are still required before your app can safely touch other businesses' data.
What Access Verification actually is
Access Verification was the process Meta used (until the October 2026 retirement) to confirm a business operated as a Tech Provider — a business with a legitimate need to access data owned by other businesses. If your app is built for other businesses (a SaaS scheduler, chatbot platform, ad-management dashboard, or CRM integration), Meta still needs Business Verification and App Review for advanced permissions before clients can grant those permissions.
It was not the same as App Review or Business Verification. Meta has now removed that extra gate; the two that remain are Business Verification and App Review.
What still matters after Access Verification retired
Most teams assume “verified” means one thing. On Meta's platform there are two distinct verifications, and clearing one does not clear the other.
Business Verification
Confirms the legal existence and identity of the business entity that owns your portfolio — using documents like registration papers, a business address and a verifiable phone or domain.
It answers: “Is this a real, legitimate company?”
App Review (still required)
Approves the advanced permissions your app needs, with the same screencast and use-case standards as before.
It answers: “Is this permission used for an allowed purpose?”
Business Verification is still required before your app can access data owned by other businesses (Meta, 9 Oct 2026). That is why so many projects still get stuck: the business looks “verified,” permissions look approved, and yet client onboarding fails because Business Verification, advanced-permission approval, or Tech Provider classification is incomplete. Our Meta Business Verification guide covers that first gate in detail.
What still triggers Tech Provider scrutiny
Not every app is a Tech Provider. Meta now says Tech Provider status “follows from you explicitly upgrading the app, or from the advanced permissions the app itself requests,” and Direct Integrator is the default. You still hit hard checks when your app requests Advanced Access to gated permissions used by people who do not have a role on your app (real clients).
Key point: Access Verification has been retired. App Review is still required for advanced permissions, and the review standards are unchanged. Business Verification is still required before your app can access data owned by other businesses.
The gated permissions span Facebook Pages, Ads and Business (for example pages_manage_posts, pages_read_engagement, ads_management, ads_read, business_management, catalog_management, leads_retrieval), Instagram (such as instagram_business_basic and content-publishing permissions), Threads, and WhatsApp business management. If your app requests these advanced permissions, it may be classified as a Tech Provider. Several of these permissions also carry their own dependency and review requirements on top.
Where Tech Provider setup still gets slow
Previously, Access Verification required an Admin to categorise and describe how the business uses other businesses' data. Meta is removing that form from App Dashboard. What still slows teams down is Business Verification evidence, advanced-permission App Review, and making sure the app is explicitly set up as a Tech Provider when the use case needs it.
That sounds simple. In practice it stalls for reasons that have nothing to do with the description you write:
- Business Verification is not fully complete — so client data access stays blocked.
- There is a restriction or flag on the business account, which blocks verification and App Review until it is resolved.
- The person submitting doesn't have Admin access on the correct business portfolio.
- The use case is described in a way that doesn't clearly match how the app actually accesses client data.
Getting the sequence right (entity structure, portfolio ownership, Business Verification, permission-level Advanced Access, and Tech Provider classification) is where most of the real difficulty lives. Doing them in the wrong order means redoing work and waiting through another review cycle.
Why this matters for your business
If Business Verification or permission approval is missing, your app can work for you but not for your customers. Every external client who tries to grant an advanced permission hits a wall, calls fail for non-role users, and onboarding grinds to a halt. For a SaaS or agency whose whole model depends on connecting many client accounts, that is the difference between a product you can sell and one that only demos.
2 gatesBusiness Verification + App Review: both still required (Access Verification retired Oct 2026)
Per-permissionTriggered by Advanced Access on gated permissions
Client-facingBlocks external onboarding until Business Verification and advanced permissions are cleared
We handle Meta Tech Provider setup as part of our app-review and business-verification support — getting the portfolio, verifications and permissions lined up in the right order so client onboarding actually works. You can see how this played out in a real project in our Access Verification (Tech Provider) case study, and if your product connects many client numbers, the related WhatsApp Embedded Signup & Tech Provider onboarding track is worth reading too.
This article is general guidance based on Meta's published developer documentation, which can change. It is not affiliated with or endorsed by Meta. Verification outcomes are decided solely by Meta, and no specific outcome or timeline can be guaranteed.
Confirm business ownership and client relationships for Meta tech provider verification.
Document data flows and requested permissions in Meta tech provider verification.
Prepare authorization screens and test accounts for Meta tech provider verification.
Align privacy, security, and deletion policies with Meta tech provider verification.
Show support processes and incident response for Meta tech provider verification.
Track reviewer feedback and remediation after Meta tech provider verification.
Review the official Meta verification documentation for current requirements.
See our Meta API guide for related provider planning.
Meta tech provider verification: document business ownership, app permissions, client authorization, and review evidence before onboarding client businesses.